I have just a couple of what I think are very low usage cifs shares. These are just a few PC's working with documentation. Recently the team that manages Active Directory informed that the EVS ip is accessing the AD server every second on port 4768. Could this have anything to do with the hnas configuration? I don't see any cifs options other than ABE that look like possible problems and I have it off.